Skip to contentDevolutions Server vulnerabilities
- devolutions serverA permission cache poisoning vulnerability in Devolutions Server allows authenticated users to...CVE-2026-17684.3 Medium
- devolutions serverIncorrect Authorization vulnerability in virtual gateway component in Devolutions Server allows...CVE-2026-10077.6 High
- devolutions serverSQL Injection vulnerability in remote-sessions in Devolutions Server.This issue affects...CVE-2026-06109.8 Critical
- devolutions server, remote desktop manager +1 moreExposure of credentials in unintended requests in Devolutions Server, Remote Desktop Manager on...CVE-2025-136836.5 Medium
- devolutions serverExposure of credentials in unintended requests in Devolutions Server.This issue affects Server:...CVE-2025-137583.5 Low
- devolutions serverSQL Injection vulnerability in last usage logs in Devolutions Server.This issue affects...CVE-2025-137578.8 High
- devolutions serverExposure of email service credentials to users without administrative rights in Devolutions...CVE-2025-137654.3 Medium
- devolutions serverImproper privilege management during pre-MFA cookie handling in Devolutions Server 2025.3.5.0 and...CVE-2025-124858.8 High
- devolutions serverImproper access control in Devolutions Server 2025.3.5.0 and earlier allows a View-only user to...CVE-2025-128086.5 Medium
- devolutions serverImproper authorization in the temporary access workflow of Devolutions Server 2025.2.12.0 and...CVE-2025-119579.0 Critical
- devolutions serverAn improper input validation in the Security Dashboard ignored-tasks API of Devolutions Server...CVE-2025-119585.1 Medium
- devolutions serverImproper certificate validation when connecting to gateways in Devolutions Server 2025.3.2 and...CVE-2025-116198.8 High
- devolutions serverDeadlock in PAM automatic check-in feature in Devolutions Server allows a password to remain...CVE-2025-83127.1 High
- devolutions serverUI synchronization issue in the Just-in-Time (JIT) access request approval interface in...CVE-2025-83535.9 Medium
- devolutions serverImproper access control in secure message component in Devolutions Server allows an authenticated...CVE-2025-67417.1 High
- devolutions serverUse of weak credentials in emergency authentication component in Devolutions Server allows an...CVE-2025-65239.5 Critical
- devolutions serverImproper access control in permissions component in Devolutions Server 2025.1.10.0 and earlier...CVE-2025-06915.0 Medium
- devolutions serverImproper access control in users MFA feature in Devolutions Server 2025.1.7.0 and earlier allows...CVE-2025-53826.8 Medium
- devolutions serverImproper access control in Tor network blocking feature in Devolutions Server 2025.1.10.0 and...CVE-2025-37685.0 Medium
- devolutions serverImproper access control in user group management in Devolutions Server 2025.1.7.0 and earlier...CVE-2025-44338.7 High
- devolutions serverImproper privilege assignment in PAM JIT privilege sets in Devolutions
Server allows a PAM user...CVE-2025-44936.5 Medium
- devolutions serverImproper access control in PAM feature in Devolutions Server 2025.1.6.0 and earlier allows a PAM...CVE-2025-43164.3 Medium
- devolutions serverIncorrect privilege assignment in PAM JIT elevation feature in Devolutions Server 2025.1.5.0 and...CVE-2025-35176.3 Medium
- devolutions serverImproper access control in web extension restriction feature in Devolutions Server 2024.3.13 and...CVE-2025-22808.1 High
- devolutions serverImproper access control in temporary access requests and checkout requests endpoints in...CVE-2025-22786.5 Medium
- devolutions serverExposure of password in web-based SSH authentication component in Devolutions Server 2024.3.13...CVE-2025-22777.5 High
- devolutions serverIncorrect authorization in PAM vaults in Devolutions Server 2024.3.12 and earlier allows an...CVE-2025-20037.1 High
- devolutions serverImproper password reset in PAM Module in Devolutions Server 2024.3.10.0 and earlier allows an...CVE-2025-12315.4 Medium
- devolutions serverIncorrect authorization in permission validation component in Devolutions Server 2024.3.6.0 and...CVE-2024-121484.3 Medium
- devolutions serverIncorrect permission assignment in the user migration feature in Devolutions Server 2024.3.8.0...CVE-2024-121515.0 Medium
- devolutions serverIncorrect authorization in the permission component in Devolutions Server 2024.3.7.0 and earlier...CVE-2024-121966.5 Medium
- devolutions server, dvls (devolutions server) +1 moreImproper access control in the Password History feature in Devolutions DVLS 2024.3.6 and earlier...CVE-2024-109714.3 Medium
- devolutions serverAuthorization bypass in the PAM access request approval mechanism in Devolutions Server 2024.2.10...CVE-2024-65126.5 Medium
- devolutions serverAuthentication bypass in the 2FA feature in Devolutions Server 2024.1.14.0 and earlier allows an...CVE-2024-48466.3 Medium
- devolutions serverImproper input validation in PAM JIT elevation feature in Devolutions Server 2024.1.11.0 and...CVE-2024-50726.5 Medium
- devolutions server, remote desktop manager +1 moreImproper permission handling in the vault offline cache feature in Devolutions Remote Desktop...CVE-2024-35454.3 Medium
- devolutions serverImproper input validation in PAM JIT elevation feature in Devolutions Server 2024.1.6 and earlier...CVE-2024-29183.6 Low
- devolutions serverImproper access control in PAM vault permissions in Devolutions Server 2024.1.6 and earlier...CVE-2024-29219.8 Critical
- devolutions serverImproper access control in PAM JIT elevation in Devolutions Server 2024.1.6 and earlier allows an...CVE-2024-29158.8 High
- devolutions serverImproper privilege management in Just-in-time (JIT) elevation module in Devolutions Server 2023.3...CVE-2024-17647.6 High
- devolutions serverImproper access control in the notification feature in Devolutions Server 2023.3.14.0 and earlier...CVE-2024-18984.3 Medium
- devolutions serverImproper session management in the identity provider authentication flow in Devolutions Server...CVE-2024-19005.5 Medium
- devolutions serverDenial of service in PAM password rotation during the check-in process in Devolutions Server 2023...CVE-2024-19014.3 Medium
- devolutions serverInformation leak in Content-Security-Policy header in Devolutions Server 2023.3.7.0 allows an...CVE-2023-62645.3 Medium
- devolutions serverImproper access control in Report log filters feature in Devolutions Server 2023.2.10.0 and...CVE-2023-53585.3 Medium
- devolutions serverImproper access control in the permission inheritance in Devolutions Server 2022.3.13.0 and...CVE-2023-55756.5 Medium
- devolutions serverImproper access control in PAM propagation scripts in Devolutions Server 2023.2.8.0 and ealier...CVE-2023-52407.5 High
- devolutions serverImproper deletion of resource in the user management feature in Devolutions Server 2023.1.8 and...CVE-2023-24002.7 Low
- devolutions serverImproper access control in Subscriptions Folder path filter in Devolutions Server 2023.1.1 and...CVE-2023-24454.9 Medium
- devolutions serverInsufficient access control in support ticket feature in Devolutions Server 2023.1.5.0 and below...CVE-2023-21185.4 Medium
- Show moreLoading…